Most recent entries from all

bdu:2026-15304

Withdrawn: CLEANSTART-2026-BP02821 — Security fixes for CVE-2025-68121, CVE-2026-1229, CVE-2026-27145, CVE-2026-29181, CVE-2026-32952, CVE-2026-33811, CVE-2…

Withdrawn by the publisher.

Affected: CleanStart: rclone

Multiple security vulnerabilities affect the rclone package. These issues are resolved in later releases. See references for individual vulnerability details.

EUVD-2026-323002

fkie_cve-2026-42500

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

GHSA-m6fh-wvw4-4629

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

openSUSE-SU-2026:10856-1 — rclone-1.74.2-1.1 on GA media

rclone-1.74.2-1.1 on GA media

RHSA-2026:62391 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate golang.org/x/image/bmp: golang: golang.org/x/image/bmp: Denial of Service via out-of-range palette index in BMP decoding golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

UBUNTU-CVE-2026-42500

Affected: Ubuntu:18.04:LTS: golang-golang-x-image, Ubuntu:20.04:LTS: golang-golang-x-image, Ubuntu:22.04:LTS: golang-golang-x-image, Ubuntu:24.04:LTS: golang-golang-x-image, Ubuntu:25.10: golang-golang-x-image, Ubuntu:26.04:LTS: golang-golang-x-image

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

WID-SEC-W-2026-1653 — Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.